Terms of Service
Key Points Summary
- •You must be 16+ to use our services
- •You are responsible for your account security
- •Subscriptions auto-renew unless cancelled
- •You retain ownership of your data
- •We may update these terms with 30 days' notice
- •Business disputes use arbitration; consumers keep court rights
1. Acceptance of Terms
These Terms of Service ("Terms") constitute a legally binding agreement between you and PrivacyForge, a service operated by Mariyan Valev, a sole trader established in the United Kingdom ("PrivacyForge", "we", "us", or "our"), governing your access to and use of the PrivacyForge platform, website, and related services (collectively, the "Service").
Who we are
- Operator: Mariyan Valev, a sole trader operating the PrivacyForge service
- Established in: United Kingdom
- Status: Sole trader (not incorporated); ICO data-protection registration in progress
- Contact: hello@privacyforge.io
1.1 Business and Consumer Users
The Service is designed and marketed for use by businesses and professionals. Where you use the Service in the course of a trade, business, craft or profession, you are a business user and the consumer-specific provisions of these Terms (such as the statutory right of withdrawal in §4.6) do not apply to you. Where you are an individual using the Service wholly outside your trade or profession, you are a consumer and nothing in these Terms removes the mandatory rights the law gives you; where a provision conflicts with your mandatory rights, those rights prevail.
By accessing or using the Service, you agree to be bound by these Terms. If you do not agree to these Terms, you must not access or use the Service.
These Terms should be read in conjunction with our Privacy Policy and Cookie Policy, which describe how we collect, use, and protect your personal data.
Important Notice
Please read these Terms carefully. For business users, Section 13 contains an arbitration agreement and class action waiver that affect how disputes are resolved. If you are a consumer, that arbitration agreement does not bind you and you keep your right to bring claims in your local courts.
2. Description of Services
PrivacyForge is a comprehensive GDPR and privacy compliance platform that provides:
- Consent Management: Tools to collect, store, and manage user consents in compliance with GDPR and other privacy regulations.
- Data Mapping: Visualize and document your data processing activities and data flows.
- Compliance Monitoring: Automated checks and alerts to maintain ongoing compliance.
- Data Subject Request Handling: Streamlined processes for handling access, deletion, and portability requests.
- Reporting & Analytics: Comprehensive reporting tools for stakeholders and regulators.
- API Access: Programmatic access to integrate with your existing systems (available on certain plans).
We may modify, suspend, or discontinue any aspect of the Service. Where we discontinue a material feature you rely on, or the Service as a whole, we will give you at least 30 days' prior notice where reasonably possible and refund any pre-paid fees covering the period after discontinuation on a pro-rata basis.
2.1 AI-Assisted Features
Parts of the Service use artificial intelligence to generate suggestions, drafts, scores, or questionnaire responses (for example in AI governance and vendor-assessment tools). AI output is provided to assist you and may be inaccurate, incomplete, or unsuitable for your circumstances. You are responsible for reviewing AI output before relying on it, and it does not constitute legal advice. Subject to these Terms, as between you and us you own the output generated from your inputs; you must not use AI features to generate unlawful, infringing, or misleading content.
2.2 API Access
Where your plan includes API access, you must use the API in accordance with our documentation and any rate limits or quotas we set. We may change, version, or deprecate API endpoints; for material breaking changes we will use reasonable efforts to provide advance notice and a transition period. We may suspend API access that threatens the security, integrity, or performance of the Service.
2.3 Beta and Early-Access Features
We may offer features labelled beta, preview, or early access. These are provided "as is", may be changed or withdrawn at any time, are excluded from any service-level commitment, and should not be relied upon for production or compliance-critical use.
3. Account Registration
3.1 Eligibility
To use the Service, you must be at least 16 years of age (or the age of majority in your jurisdiction, whichever is higher) and have the legal capacity to enter into binding contracts.
3.2 Account Creation
You must provide accurate, current, and complete information during registration and keep your account information updated. You are responsible for maintaining the confidentiality of your account credentials and for all activities that occur under your account.
3.3 Account Security
You agree to:
- Use a strong, unique password for your account
- Enable two-factor authentication when available
- Notify us immediately of any unauthorized access or security breach
- Not share your account credentials with others
4. Subscription Plans & Billing
4.1 Subscription Tiers
We offer the following subscription plans:
| Plan | Features |
|---|---|
| Free | Basic consent management, limited consents, community support |
| Starter | Up to 10,000 consents, email support, basic analytics |
| Professional | Unlimited consents, priority support, advanced analytics, API access |
| Enterprise | Custom solutions, dedicated support, SLA guarantees, SSO integration |
4.2 Billing & Payment
- Paid subscriptions are billed in advance on a monthly or annual basis.
- Except for the refund rights in §4.4 (money-back guarantee), §4.6 (consumer right of withdrawal), and any non-excludable rights the law gives you, fees are non-refundable.
- Payments are processed securely through Stripe. We do not store your payment card details.
- We may change our pricing with 30 days' notice to current subscribers.
4.3 Auto-Renewal
Subscriptions automatically renew at the end of each billing period unless you cancel before the renewal date. You can cancel your subscription at any time through your account settings or by contacting us. For annual subscriptions, we will send you a reminder by email before the subscription auto-renews so you have a fair opportunity to cancel.
4.4 Refund Policy
We offer a 14-day money-back guarantee for new paid subscriptions. If you are not satisfied with our Service within the first 14 days, contact us for a full refund. After this period, refunds are provided at our discretion.
4.5 Free Trial
We may offer free trial periods. At the end of a trial, your account will be converted to a paid subscription unless you cancel before the trial ends. We will notify you before charging.
4.6 Consumer Right of Withdrawal
If you are a consumer in the UK or EU, you normally have the right to withdraw from a purchase within 14 days without giving a reason. Because the Service is digital content and services supplied online, the following applies:
- By starting to use the Service during the 14-day period, you request that we begin supply immediately and acknowledge that you will lose your right of withdrawal once the Service has been fully performed, and that for paid digital content you consent to immediate supply and acknowledge the loss of the right of withdrawal.
- If you withdraw before performance is complete, you may be required to pay for the proportion of the Service already supplied.
- This statutory right is in addition to the 14-day money-back guarantee in §4.4, which we offer to all new paid subscribers.
To exercise the right of withdrawal, contact hello@privacyforge.io within the 14-day period. This §4.6 does not apply to business users.
5. User Responsibilities
As a user of the Service, you are responsible for:
- Legal Compliance: Ensuring your use of the Service complies with all applicable laws and regulations, including GDPR, CCPA, and other privacy laws.
- Data Accuracy: The accuracy and legality of the data you process through our Service.
- Proper Consent: Obtaining valid consents from your end users where required by law.
- Security: Implementing appropriate security measures in your systems that integrate with our Service.
- Data Processing Agreements: Entering into appropriate data processing agreements where you use our Service to process personal data on behalf of others.
Data Processing
When you use PrivacyForge to process personal data, you act as the data controller and we act as your data processor. Our Data Processing Agreement (DPA) forms part of these Terms and governs this relationship, and the sub-processors we use are listed at our sub-processor page.
6. Acceptable Use Policy
You agree not to use the Service to:
- ✕Violate any applicable laws, regulations, or third-party rights
- ✕Transmit any malicious code, viruses, or harmful content
- ✕Attempt to gain unauthorized access to our systems or networks
- ✕Use the Service to collect, store, or process sensitive personal data without proper consent
- ✕Interfere with or disrupt the integrity or performance of the Service
- ✕Attempt to reverse engineer, decompile, or disassemble any part of the Service
- ✕Use the Service for any fraudulent, deceptive, or illegal purpose
- ✕Resell, sublicense, or redistribute the Service without authorization
- ✕Use automated means to access the Service beyond approved API usage
- ✕Impersonate another person or entity
Violation of this Acceptable Use Policy may result in immediate suspension or termination of your account without notice or refund.
7. Intellectual Property
7.1 Our Intellectual Property
The Service and its original content, features, and functionality are owned by Mariyan Valev (operating as PrivacyForge) and are protected by international copyright, trademark, patent, trade secret, and other intellectual property laws.
7.2 License to Use
Subject to your compliance with these Terms, we grant you a limited, non-exclusive, non-transferable, revocable license to access and use the Service for your internal business purposes during your subscription period.
7.3 Restrictions
You may not:
- Copy, modify, or create derivative works of the Service
- Reverse engineer, disassemble, or decompile any part of the Service
- Remove any proprietary notices or labels
- Use our trademarks without prior written consent
8. Your Data & Content
8.1 Ownership
You retain all ownership rights to your data. By using the Service, you grant us a limited license to host, store, and process your data solely to provide the Service to you.
8.2 Data Export
You can export your data at any time through our platform. Upon termination of your subscription, we will provide a reasonable period (typically 30 days) to export your data before deletion.
8.3 Data Backup
While we maintain regular backups, you are responsible for maintaining your own backups of critical data. We are not liable for any data loss.
8.4 Confidentiality
We treat your data as confidential and will not access it except as necessary to provide the Service, comply with law, or with your consent.
9. Disclaimers
THE SERVICE IS PROVIDED "AS IS" AND "AS AVAILABLE" WITHOUT WARRANTIES OF ANY KIND, WHETHER EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO IMPLIED WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, AND NON-INFRINGEMENT.
We do not warrant that:
- The Service will be uninterrupted, timely, secure, or error-free
- The results obtained from the Service will be accurate or reliable
- The Service will meet all your requirements
- Any errors will be corrected
Compliance Disclaimer: While PrivacyForge is designed to help you achieve compliance with privacy regulations, using our Service does not guarantee legal compliance. You should consult with legal professionals regarding your specific compliance obligations.
10. Limitation of Liability
TO THE MAXIMUM EXTENT PERMITTED BY LAW, PRIVACYFORGE SHALL NOT BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, OR PUNITIVE DAMAGES, OR ANY LOSS OF PROFITS OR REVENUES, WHETHER INCURRED DIRECTLY OR INDIRECTLY, OR ANY LOSS OF DATA, USE, GOODWILL, OR OTHER INTANGIBLE LOSSES.
Maximum Liability: Subject to the paragraph below, our total liability to you for all claims arising from or related to these Terms or the Service shall not exceed the greater of: (a) the amounts you paid us in the 12 months prior to the event giving rise to the claim, or (b) £100 (or the equivalent in your billing currency).
These limitations apply regardless of the legal theory on which the claim is based.
Liabilities we do not exclude
Nothing in these Terms limits or excludes our liability for: (a) death or personal injury caused by our negligence; (b) fraud or fraudulent misrepresentation; (c) any liability that cannot be limited or excluded under applicable law; (d) for consumers, your non-excludable statutory rights; or (e) liability to a data subject or supervisory authority under data-protection law to the extent it cannot lawfully be limited. Where you are a consumer, these caps do not affect losses that are a foreseeable result of our breach.
11. Indemnification
You agree to indemnify, defend, and hold harmless PrivacyForge and its officers, directors, employees, contractors, agents, licensors, and suppliers from and against any claims, liabilities, damages, judgments, awards, losses, costs, expenses, or fees (including reasonable attorneys' fees) arising out of or relating to:
- Your violation of these Terms
- Your use of the Service
- Your violation of any third-party rights
- Any content or data you submit to the Service
- Your violation of applicable laws or regulations
12. Termination
12.1 Termination by You
You may terminate your account at any time through your account settings or by contacting us. Upon termination, your right to use the Service will immediately cease.
12.2 Termination by Us
We may terminate or suspend your account immediately, without prior notice or liability, for any reason, including if you breach these Terms. Upon termination, we may delete your account and data after a reasonable grace period.
12.3 Effect of Termination
Upon termination, the following provisions survive: Sections 7–11, 13, 14, and any other provisions that by their nature should survive termination.
13. Dispute Resolution
13.1 Governing Law
These Terms and any dispute or claim arising out of or in connection with them or their subject matter are governed by and construed in accordance with the laws of England and Wales. If you are a consumer, this choice of law does not deprive you of the protection of the mandatory laws of the country in which you habitually reside.
13.2 Informal Resolution
Before initiating any formal dispute resolution, you agree to contact us at hello@privacyforge.io to attempt to resolve the dispute informally. We will attempt to resolve disputes within 30 days.
13.3 Business Users — Arbitration
This §13.3 applies only to business users. Any dispute that cannot be resolved informally shall be finally resolved by binding arbitration administered by the London Court of International Arbitration (LCIA) under its rules. The seat of arbitration shall be London, England, the language shall be English, and the number of arbitrators shall be one.
13.4 Business Users — Class Action Waiver
If you are a business user, you agree that dispute resolution will be conducted on an individual basis only, and not as a class, consolidated, or representative action. This waiver does not apply to consumers.
13.5 Consumers — Courts
If you are a consumer, the arbitration agreement and class action waiver above do not apply to you. You and we agree that the courts of England and Wales have non-exclusive jurisdiction, but you may also bring proceedings in the courts of the country in which you habitually reside, and you retain any right to use an alternative dispute resolution or online dispute resolution mechanism available to you under local law. Nothing in this Section limits a consumer's rights to bring representative or collective actions where permitted by law.
13.6 Exceptions
Notwithstanding the above, either party may seek injunctive or other equitable relief, or bring a claim to protect its intellectual property rights, in any court of competent jurisdiction.
14. General Provisions
14.1 Modifications to Terms
We may modify these Terms at any time. We will provide notice of material changes by email or through the Service at least 30 days before they take effect. Your continued use of the Service after changes become effective constitutes acceptance of the modified Terms.
14.2 Entire Agreement
These Terms, together with our Privacy Policy and any other policies referenced herein, constitute the entire agreement between you and us regarding the Service.
14.3 Severability
If any provision of these Terms is found to be unenforceable, the remaining provisions will remain in full force and effect.
14.4 Waiver
Our failure to enforce any right or provision of these Terms will not be considered a waiver of those rights.
14.5 Assignment
You may not assign these Terms without our prior written consent. We may assign our rights and obligations without restriction, provided your rights under these Terms are not materially reduced.
14.6 Force Majeure
Neither party is liable for any failure or delay in performance (other than payment obligations) to the extent caused by events beyond its reasonable control, including acts of God, war, terrorism, civil unrest, epidemics, strikes, failures of utilities or telecommunications, and failures of third-party hosting or infrastructure providers.
14.7 Notices
We may give you notices by email to the address on your account or by posting them in the Service. You must send formal legal notices to us by email at hello@privacyforge.io. A postal address for service can be provided on request.
14.8 Feedback
If you give us suggestions, ideas, or other feedback about the Service, you grant us a perpetual, irrevocable, worldwide, royalty-free licence to use it without restriction or obligation to you. We will not identify you as the source of feedback without your permission.
14.9 Export Controls & Sanctions
You must comply with all applicable export-control and economic-sanctions laws. You represent that you are not located in, and will not use the Service from, a country or region subject to comprehensive sanctions, and that you are not a person with whom dealing is prohibited under applicable sanctions laws.
15. Contact Information
If you have questions about these Terms of Service, please contact us:
Legal Department
- Email: hello@privacyforge.io
- Response time: Within 48 hours
General Support
- Email: hello@privacyforge.io
- Help Center: Available 24/7
Last updated: June 24, 2026 | Version: 3.0